last executing test programs: 268.351823ms ago: executing program 1 (id=2): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000080)={[{@i_version}, {@nogrpid}, {@bh}]}, 0x1, 0x51d, &(0x7f0000000200)="$eJzs3c9vHFcdAPDvTLK2k7h1WnoABG1oCwFFWceb1qp6gHJCCFVC9AhSauyNZXnXa3nXpTaRcM9ckajECY78AZx74s4FwY1LOSDxwwLVSBwGzezY2di79uaHvZb385FG89688X7fizPvzbxd7wtgbN2IiJ2ImIiI9yNipjyelFu8093y8z7bfbC4t/tgMYkse++fSVGeH4uen8ldK19zKiJ+8J2IHydH47a3tlcXGo36Rpmf7TTXZ9tb27dXmgvL9eX6Wq02Pzd/5627b9YeozVTx5a+0pwoU1/+9A873/hpXq3p8khvO56lbtMrB3FylyPie6cRbAQule2ZGHVFeCJpRLwYEa8W1/9MXCp+mwDARZZlM5HN9OYBgIsuLebAkrRazgVMR5pWq905vJfiatpotTu37rc215a6c2XXo5LeX2nU75RzhdejkuT5uSL9MF87lL8bES9ExC8mrxT56mKrsTTKGx8AGGPXDo3//5nsjv8AwAV3/MdmAICLyPgPAOPH+A8A48f4DwDjpzv+X3ncH8uy7GenUR0A4Ax4/geA8WP8B4Cx8v133823bK/8/uulD7Y2V1sf3F6qt1erzc3F6mJrY7263GotF9/Z0zzp9Rqt1vrcG7H54fVvrrc7s+2t7XvN1uZa517xvd736pXirJ0zaBkAMMgLr3zy5yQfkd++UmzRs5ZDZaQ1A05bOuoKACNzadQVAEbGal8wvh4+4z/2hwBMD8AF0WeJ3kdM9fsDoSzLstOrEnDKbn7B/D+Mq575f58ChjFz0vx/sTawNwnhQjL/D+Mry5Jh1/yPYU8EAM63Y+b4r5/lfQgwOgPe/3+x3P+2fHPgR0uHz/j4NGsFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA59v++r/Vcpnf6UjTajXiuWIBoEpyf6VRvxMRz0fEnyYrk3l+bsR1BgCeVvq3pFz/6+bM69OPFL187SA5ERE/+dV7v/xwodPZ+GPERPKvyf3jnY/L47UTg02dRgsAgOPtj9PFvudB/rPdB4v721nW5+/f7t4V5HH3didi7yD+5bhc7KeiEhFX/52U+a6kZ+7iaex8FBGf79f+JKaLOZDuLcvh+Hns5840fvpI/LRcoDkt/y0+9wzqAuPmk7z/eaff9ZfGjWLf//qfKnqop1f2f/lLLe4VfeDD+Pv936UB/d+NYWO88fvvdlNXjpZ9FPHFyxH7sfd6+p/9+MmA+K8PGf8vX3r51UFl2a8jbkb/+L2xZjvN9dn21vbtlebCcn25vlarzc/N33nr7pu12WKOenbwaPCPt289P6gsb//VAfGnTmj/V4ds/2/+9/4Pv3JM/K+/1i9+Gi8dEz8fE782ZPyFq78b+Nydx1862v5kmN//rSHjf/rX7SPLhgMAo9Pe2l5daDTqGxIS5z+R/5c9B9Xom/jWWcWaiP5FP3+te00fKsqyJ4o1qMd4FrNuwHlwcNFHxH9HXRkAAAAAAAAAAAAAAKCvs/iLpVG3EQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIvr/wEAAP//Rb3T2A==") r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148) r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x107b42, 0x32) ftruncate(r2, 0x6000000) fallocate(r0, 0x0, 0x0, 0x2000402) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0xc, r0, 0x0, 0x0, 0x0, 0xfffffffffdffffff}) 133.524696ms ago: executing program 3 (id=4): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB="00000000100000000057da", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c0000000000008001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='mmap_lock_acquire_returned\x00', r2}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000380)='memory.stat\x00', 0x275a, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000010000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r7, 0x0, 0x2}, 0x18) r8 = mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xef\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec-\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xafUD\x9dA\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\no[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f0, 0x0) mq_timedsend(r8, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r8, 0x0, 0x0, 0x6, 0x0) mq_timedsend(r8, 0x0, 0x0, 0x0, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') close(r8) read(r4, &(0x7f0000000040)=""/190, 0xbe) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='mmap_lock_acquire_returned\x00', r1}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r10 = syz_open_procfs(0x0, &(0x7f0000000480)='ns\x00') getdents64(r10, &(0x7f0000000000)=""/36, 0x24) getdents64(r10, 0x0, 0x18) getsockname$packet(r10, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000002c0)=0x14) sendmsg$GTP_CMD_DELPDP(r10, &(0x7f00000004c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000580)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd7000fedbdf25010000000800020000000000080002000100000008000700", @ANYRES32=r10, @ANYBLOB="080004000a01010008000900030000000c000300af910000001d000008000700ecd1bc4c54dfad0d212abd3159afbe2a8f9dd7674672e6e15a47f8ecab727ada1df60f227756b8ce640d32b7e669b835b252529784148e4c73637fa8da5d74f5cef8f6e7620022fcd8956c463e60dcb244526b00707a296d0f4b251252916537639ae88fb57e3d54e381dcb6a412f140cc576452c5498b4b6c5e46cfe8049210bf990ef4b0ff8a5118900d4392754baae185fee7cc715dc996388f0cd9e668b8294a465f2e3f4490a3e56645c645a138a675ced0e397872c13d27b98", @ANYRES32=r10, @ANYBLOB="08000100", @ANYRES32=r11, @ANYBLOB="05000d0005000000"], 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x200108c0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000500)=ANY=[@ANYRES32=r9, @ANYRES16], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r11}, 0x94) 0s ago: executing program 3 (id=6): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7fe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ac0)={&(0x7f0000000b00)='kmem_cache_free\x00', r3, 0x0, 0x1034}, 0x18) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x2014) (async) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x2014) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000300)={0x54, 0x0, 0x8, {0x0, 0x1}, {0x74, 0x2}, @rumble={0x1, 0x4}}) syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) (async) r5 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) write$char_usb(r5, &(0x7f0000000040)="e2", 0xff0f) (async) write$char_usb(r5, &(0x7f0000000040)="e2", 0xff0f) openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) (async) r6 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r8, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x34, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x9}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000008}, 0x20004000) (async) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r8, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x34, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x9}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000008}, 0x20004000) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) (async) r9 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) syz_emit_ethernet(0x52, &(0x7f0000010340)={@local, @random='\x00 \x00\x00\x00\b', @void, {@ipv4={0x800, @tcp={{0xc, 0x4, 0x0, 0x0, 0x44, 0x4, 0x0, 0x0, 0x6, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@ssrr={0x89, 0xf, 0x6b, [@empty, @local, @multicast1]}, @timestamp={0x44, 0x4, 0x5, 0x3}, @cipso={0x86, 0x6}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) (async) syz_emit_ethernet(0x52, &(0x7f0000010340)={@local, @random='\x00 \x00\x00\x00\b', @void, {@ipv4={0x800, @tcp={{0xc, 0x4, 0x0, 0x0, 0x44, 0x4, 0x0, 0x0, 0x6, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@ssrr={0x89, 0xf, 0x6b, [@empty, @local, @multicast1]}, @timestamp={0x44, 0x4, 0x5, 0x3}, @cipso={0x86, 0x6}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r9, &(0x7f0000000000)={0x14, 0x88, 0xfa00, {r10, 0x10, 0x0, @in={0x2, 0x4e24, @empty}}}, 0x90) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r9, &(0x7f0000000340)={0x15, 0x110, 0xfa08, {r10, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x4e23, @empty}, @in={0x2, 0x800, @remote}}}, 0x118) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r7, &(0x7f00000003c0)={0x15, 0x110, 0xfa00, {r10, 0x9, 0x0, 0x0, 0x0, @in={0x2, 0x4e23, @multicast1}, @ib={0x1b, 0x340, 0x9, {"c4a7b7d47a77f7a64aed988528feb53a"}, 0x4, 0x5, 0x100000000}}}, 0x118) r11 = openat$nci(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) lseek(r6, 0x6, 0x0) write$nci(r11, 0x0, 0xfffffeea) (async) write$nci(r11, 0x0, 0xfffffeea) r12 = socket$inet(0x2, 0x2, 0x4) r13 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000140)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) poll(&(0x7f0000000340)=[{r4, 0x3072}, {r4, 0x80}, {r11, 0x4008}, {r11, 0x8008}, {r0, 0x2100}, {r0, 0x8000}, {r6, 0x400}, {r11, 0xa8}, {r11, 0x220a}, {r0, 0x2100}, {0xffffffffffffffff, 0x1004}, {r12, 0x610}, {r3, 0x1}, {r13, 0x8}, {r14, 0x2004}], 0xf, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.201' (ED25519) to the list of known hosts. [ 33.280794][ T29] audit: type=1400 audit(1763340386.882:62): avc: denied { mounton } for pid=3303 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 33.303908][ T29] audit: type=1400 audit(1763340386.902:63): avc: denied { mount } for pid=3303 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 33.304890][ T3303] cgroup: Unknown subsys name 'net' [ 33.331780][ T29] audit: type=1400 audit(1763340386.932:64): avc: denied { unmount } for pid=3303 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 33.446721][ T3303] cgroup: Unknown subsys name 'cpuset' [ 33.453129][ T3303] cgroup: Unknown subsys name 'rlimit' [ 33.644430][ T29] audit: type=1400 audit(1763340387.242:65): avc: denied { setattr } for pid=3303 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 33.670201][ T29] audit: type=1400 audit(1763340387.242:66): avc: denied { create } for pid=3303 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 33.690694][ T29] audit: type=1400 audit(1763340387.242:67): avc: denied { write } for pid=3303 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 33.711126][ T29] audit: type=1400 audit(1763340387.252:68): avc: denied { read } for pid=3303 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 33.711796][ T3305] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 33.731700][ T29] audit: type=1400 audit(1763340387.252:69): avc: denied { mounton } for pid=3303 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 33.765129][ T29] audit: type=1400 audit(1763340387.252:70): avc: denied { mount } for pid=3303 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 33.774975][ T3303] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 33.789379][ T29] audit: type=1400 audit(1763340387.352:71): avc: denied { relabelto } for pid=3305 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 35.647919][ T3312] chnl_net:caif_netlink_parms(): no params data found [ 35.725614][ T3312] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.732826][ T3312] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.740548][ T3312] bridge_slave_0: entered allmulticast mode [ 35.747208][ T3312] bridge_slave_0: entered promiscuous mode [ 35.755444][ T3312] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.762736][ T3312] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.769924][ T3312] bridge_slave_1: entered allmulticast mode [ 35.776415][ T3312] bridge_slave_1: entered promiscuous mode [ 35.809739][ T3312] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.820254][ T3312] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.850119][ T3312] team0: Port device team_slave_0 added [ 35.868792][ T3312] team0: Port device team_slave_1 added [ 35.927896][ T3313] chnl_net:caif_netlink_parms(): no params data found [ 35.937303][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.944284][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.970342][ T3312] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.983748][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.990751][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.016933][ T3312] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.040279][ T3314] chnl_net:caif_netlink_parms(): no params data found [ 36.093495][ T3322] chnl_net:caif_netlink_parms(): no params data found [ 36.123113][ T3312] hsr_slave_0: entered promiscuous mode [ 36.129113][ T3312] hsr_slave_1: entered promiscuous mode [ 36.137616][ T3318] chnl_net:caif_netlink_parms(): no params data found [ 36.148769][ T3313] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.155889][ T3313] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.163022][ T3313] bridge_slave_0: entered allmulticast mode [ 36.169644][ T3313] bridge_slave_0: entered promiscuous mode [ 36.176514][ T3313] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.183794][ T3313] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.191415][ T3313] bridge_slave_1: entered allmulticast mode [ 36.198089][ T3313] bridge_slave_1: entered promiscuous mode [ 36.246950][ T3314] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.254066][ T3314] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.261471][ T3314] bridge_slave_0: entered allmulticast mode [ 36.267904][ T3314] bridge_slave_0: entered promiscuous mode [ 36.289302][ T3314] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.296527][ T3314] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.303835][ T3314] bridge_slave_1: entered allmulticast mode [ 36.310330][ T3314] bridge_slave_1: entered promiscuous mode [ 36.317653][ T3313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.344831][ T3313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.385199][ T3322] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.392431][ T3322] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.399666][ T3322] bridge_slave_0: entered allmulticast mode [ 36.406107][ T3322] bridge_slave_0: entered promiscuous mode [ 36.413528][ T3314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.430740][ T3313] team0: Port device team_slave_0 added [ 36.441497][ T3322] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.448753][ T3322] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.456012][ T3322] bridge_slave_1: entered allmulticast mode [ 36.462612][ T3322] bridge_slave_1: entered promiscuous mode [ 36.469925][ T3314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.482036][ T3313] team0: Port device team_slave_1 added [ 36.487861][ T3318] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.494927][ T3318] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.502171][ T3318] bridge_slave_0: entered allmulticast mode [ 36.508739][ T3318] bridge_slave_0: entered promiscuous mode [ 36.515456][ T3318] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.522689][ T3318] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.529940][ T3318] bridge_slave_1: entered allmulticast mode [ 36.536401][ T3318] bridge_slave_1: entered promiscuous mode [ 36.588573][ T3314] team0: Port device team_slave_0 added [ 36.599413][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.606499][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.632716][ T3313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.644808][ T3318] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.655511][ T3322] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.670123][ T3314] team0: Port device team_slave_1 added [ 36.679717][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.686767][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.712814][ T3313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.724782][ T3318] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.735119][ T3322] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.771981][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.779017][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.805093][ T3314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.830284][ T3322] team0: Port device team_slave_0 added [ 36.836754][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.843807][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.870037][ T3314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.881496][ T3318] team0: Port device team_slave_0 added [ 36.888542][ T3318] team0: Port device team_slave_1 added [ 36.895296][ T3322] team0: Port device team_slave_1 added [ 36.925503][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.932574][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.958548][ T3318] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.970341][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.977371][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.003436][ T3318] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.029981][ T3322] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.036962][ T3322] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.062935][ T3322] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.076095][ T3313] hsr_slave_0: entered promiscuous mode [ 37.082126][ T3313] hsr_slave_1: entered promiscuous mode [ 37.088156][ T3313] debugfs: 'hsr0' already exists in 'hsr' [ 37.093891][ T3313] Cannot create hsr debugfs directory [ 37.120280][ T3314] hsr_slave_0: entered promiscuous mode [ 37.126435][ T3314] hsr_slave_1: entered promiscuous mode [ 37.132310][ T3314] debugfs: 'hsr0' already exists in 'hsr' [ 37.138121][ T3314] Cannot create hsr debugfs directory [ 37.143863][ T3322] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.150908][ T3322] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.176812][ T3322] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.221206][ T3318] hsr_slave_0: entered promiscuous mode [ 37.227420][ T3318] hsr_slave_1: entered promiscuous mode [ 37.233371][ T3318] debugfs: 'hsr0' already exists in 'hsr' [ 37.239136][ T3318] Cannot create hsr debugfs directory [ 37.271192][ T3312] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 37.283649][ T3322] hsr_slave_0: entered promiscuous mode [ 37.290040][ T3322] hsr_slave_1: entered promiscuous mode [ 37.295973][ T3322] debugfs: 'hsr0' already exists in 'hsr' [ 37.301706][ T3322] Cannot create hsr debugfs directory [ 37.317056][ T3312] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 37.348249][ T3312] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 37.359377][ T3312] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 37.479228][ T3313] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 37.488807][ T3313] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 37.510712][ T3313] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 37.519693][ T3313] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 37.533991][ T3314] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 37.543187][ T3314] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 37.557685][ T3314] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 37.567703][ T3314] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 37.603281][ T3318] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 37.621234][ T3318] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 37.640480][ T3318] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 37.652201][ T3312] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.664615][ T3312] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.672176][ T3318] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 37.707702][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.714888][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.723960][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.731090][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.745549][ T3313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.762387][ T3312] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 37.772914][ T3312] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 37.785011][ T3322] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 37.794372][ T3322] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 37.818671][ T3322] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 37.833920][ T3313] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.841394][ T3322] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 37.863209][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.870430][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.879982][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.887088][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.910686][ T3314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.935153][ T3312] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.968211][ T3314] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.982097][ T3322] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.004994][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.012102][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.021426][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.028527][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.048079][ T3322] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.059157][ T3318] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.077970][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.085160][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.109108][ T3318] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.117389][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.124470][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.148645][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.155784][ T293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.170458][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.177645][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.203237][ T3322] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 38.213682][ T3322] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 38.232639][ T3312] veth0_vlan: entered promiscuous mode [ 38.254909][ T3314] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.270597][ T3313] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.284612][ T3312] veth1_vlan: entered promiscuous mode [ 38.309464][ T3318] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 38.319957][ T3318] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 38.360841][ T3312] veth0_macvtap: entered promiscuous mode [ 38.390996][ T3312] veth1_macvtap: entered promiscuous mode [ 38.408757][ T3322] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.420636][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.442882][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.454531][ T3318] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.467428][ T3313] veth0_vlan: entered promiscuous mode [ 38.478059][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.513188][ T3313] veth1_vlan: entered promiscuous mode [ 38.520404][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.532052][ T3314] veth0_vlan: entered promiscuous mode [ 38.541391][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.561909][ T3313] veth0_macvtap: entered promiscuous mode [ 38.569528][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 38.569545][ T29] audit: type=1400 audit(1763340392.172:81): avc: denied { mounton } for pid=3312 comm="syz-executor" path="/root/syzkaller.DJqLvQ/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 38.577763][ T3314] veth1_vlan: entered promiscuous mode [ 38.610909][ T29] audit: type=1400 audit(1763340392.172:82): avc: denied { mount } for pid=3312 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 38.619843][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.633266][ T29] audit: type=1400 audit(1763340392.172:83): avc: denied { mounton } for pid=3312 comm="syz-executor" path="/root/syzkaller.DJqLvQ/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 38.655459][ T3314] veth0_macvtap: entered promiscuous mode [ 38.667291][ T29] audit: type=1400 audit(1763340392.172:84): avc: denied { mount } for pid=3312 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 38.680823][ T3313] veth1_macvtap: entered promiscuous mode [ 38.694636][ T29] audit: type=1400 audit(1763340392.172:85): avc: denied { mounton } for pid=3312 comm="syz-executor" path="/root/syzkaller.DJqLvQ/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 38.726777][ T3314] veth1_macvtap: entered promiscuous mode [ 38.732481][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.732647][ T29] audit: type=1400 audit(1763340392.172:86): avc: denied { mounton } for pid=3312 comm="syz-executor" path="/root/syzkaller.DJqLvQ/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=3894 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 38.767388][ T29] audit: type=1400 audit(1763340392.172:87): avc: denied { unmount } for pid=3312 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 38.774618][ T3322] veth0_vlan: entered promiscuous mode [ 38.786927][ T29] audit: type=1400 audit(1763340392.212:88): avc: denied { mounton } for pid=3312 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 38.802393][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.815717][ T29] audit: type=1400 audit(1763340392.212:89): avc: denied { mount } for pid=3312 comm="syz-executor" name="/" dev="gadgetfs" ino=3901 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 38.827340][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.855512][ T3322] veth1_vlan: entered promiscuous mode [ 38.863607][ T3312] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 38.875901][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.895125][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.911036][ T3322] veth0_macvtap: entered promiscuous mode [ 38.917087][ T29] audit: type=1400 audit(1763340392.502:90): avc: denied { read write } for pid=3312 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 38.959435][ T3480] loop1: detected capacity change from 0 to 512 [ 38.971867][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.979393][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.990325][ T3322] veth1_macvtap: entered promiscuous mode [ 39.001653][ T3322] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.019646][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.036006][ T3480] EXT4-fs: Ignoring removed i_version option [ 39.042108][ T3480] EXT4-fs: Ignoring removed bh option [ 39.055007][ T3322] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.080609][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.099307][ T3480] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.116300][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.125273][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.143432][ T3318] veth0_vlan: entered promiscuous mode [ 39.149361][ T3480] ext4 filesystem being mounted at /0/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 39.179655][ T3318] veth1_vlan: entered promiscuous mode [ 39.197229][ T3422] ================================================================== [ 39.203541][ T3318] veth0_macvtap: entered promiscuous mode [ 39.205454][ T3422] BUG: KCSAN: data-race in __mod_timer / __mod_timer [ 39.213139][ T3318] veth1_macvtap: entered promiscuous mode [ 39.217910][ T3422] [ 39.217919][ T3422] write to 0xffff888119e5b790 of 8 bytes by task 3408 on cpu 1: [ 39.217938][ T3422] __mod_timer+0x784/0x840 [ 39.230135][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.233645][ T3422] mod_timer+0x1f/0x30 [ 39.240040][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.245319][ T3422] wg_timers_any_authenticated_packet_traversal+0xd0/0x100 [ 39.260261][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.263777][ T3422] wg_packet_tx_worker+0xeb/0x330 [ 39.277750][ T3422] process_scheduled_works+0x4ce/0x9d0 [ 39.277788][ T3422] worker_thread+0x582/0x770 [ 39.277808][ T3422] kthread+0x489/0x510 [ 39.291964][ T3422] ret_from_fork+0x122/0x1b0 [ 39.296600][ T3422] ret_from_fork_asm+0x1a/0x30 [ 39.301523][ T3422] [ 39.303890][ T3422] read to 0xffff888119e5b790 of 8 bytes by task 3422 on cpu 0: [ 39.311586][ T3422] __mod_timer+0x69/0x840 [ 39.315977][ T3422] mod_timer+0x1f/0x30 [ 39.320054][ T3422] wg_timers_any_authenticated_packet_traversal+0xd0/0x100 [ 39.327269][ T3422] wg_packet_rx_poll+0x7f5/0x1160 [ 39.332310][ T3422] __napi_poll+0x66/0x310 [ 39.336644][ T3422] napi_threaded_poll_loop+0x185/0x530 [ 39.342153][ T3422] napi_threaded_poll+0xda/0x160 [ 39.347103][ T3422] kthread+0x489/0x510 [ 39.351196][ T3422] ret_from_fork+0x122/0x1b0 [ 39.355811][ T3422] ret_from_fork_asm+0x1a/0x30 [ 39.360611][ T3422] [ 39.362928][ T3422] value changed: 0x00000000ffff9ca1 -> 0x00000000ffff9ca2 [ 39.370025][ T3422] [ 39.372346][ T3422] Reported by Kernel Concurrency Sanitizer on: [ 39.378505][ T3422] CPU: 0 UID: 0 PID: 3422 Comm: napi/wg1-0 Not tainted syzkaller #0 PREEMPT(voluntary) [ 39.388241][ T3422] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 39.398300][ T3422] ================================================================== [ 39.409414][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.451492][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.484249][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.493280][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.510458][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.533954][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.543191][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.552593][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.562321][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0